Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b56f557a-42a7-3336-8304-574a92011536.roa
File:                     b56f557a-42a7-3336-8304-574a92011536.roa (raw, json)
Hash identifier:          41f2hCHciEJOTcdmuOWVgG1+DUkc0ADxg7+sgNgOaLg=
Subject key identifier:   92:A8:FF:15:A7:02:09:2F:2C:10:50:7B:33:C9:1B:B8:1C:3C:3F:00
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858413D66BB61293649655A4E2310
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b56f557a-42a7-3336-8304-574a92011536.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 18 Jun 2025 04:00:00 +0000
asID:                     210703
IP address blocks:        108.165.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:3d:66:bb:61:29:36:49:65:5a:4e:23:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jun 18 04:00:00 2025 GMT
        Subject: CN=50b70002-e065-4c9d-8cd0-4b2382ff8ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:0c:2f:a0:7e:83:f6:70:8d:e2:31:4e:9d:
                    a1:ea:80:62:7b:90:89:ef:94:08:4a:35:06:12:71:
                    3e:53:8e:6e:68:d5:8a:61:9a:25:39:83:98:b3:ef:
                    d1:0c:8d:34:d9:27:f5:9f:b8:85:2c:7f:86:0a:a6:
                    1d:06:27:89:49:7a:10:12:65:f9:b7:ab:97:28:f1:
                    93:35:5d:2c:90:6c:61:30:7a:e0:96:29:79:01:2a:
                    01:b9:e2:72:fc:5a:a7:35:3e:1f:cc:a2:24:81:76:
                    bd:25:ea:6b:2d:57:16:22:bc:de:ef:8b:ae:4b:2d:
                    0b:3b:c3:37:c8:a1:89:73:26:2e:bd:46:fa:61:45:
                    aa:b5:c4:61:0d:9b:c9:8e:4b:b0:70:a1:ac:0a:63:
                    5c:6d:fa:89:af:c4:51:e3:e0:47:49:43:8a:8c:7d:
                    24:33:91:79:6f:3c:ff:ca:71:14:11:3d:b2:41:46:
                    99:7b:f5:24:9c:a3:91:77:a1:44:fa:ce:d6:e6:37:
                    de:d5:36:c9:48:98:b9:38:f3:22:c0:99:73:ad:8b:
                    6d:3f:5c:eb:0b:dd:1f:39:9e:f0:af:e0:d2:a5:51:
                    36:6b:6d:4a:84:3a:6c:05:b2:35:60:5a:7f:2e:41:
                    fd:f7:4a:12:7f:4e:23:21:9e:dd:94:df:93:f5:b3:
                    18:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A8:FF:15:A7:02:09:2F:2C:10:50:7B:33:C9:1B:B8:1C:3C:3F:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b56f557a-42a7-3336-8304-574a92011536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:73:9d:16:6c:30:1e:fb:2c:cc:aa:23:e6:59:11:84:cd:2c:
         7e:21:4a:e7:0f:fb:00:4e:d7:54:b3:53:91:e0:0e:95:80:0b:
         94:58:f2:54:5b:8e:6c:13:58:19:d6:0c:24:13:fb:8f:2b:a8:
         a8:1e:0b:f9:ba:d3:37:ca:68:df:b1:4e:cf:16:7c:66:05:71:
         b9:bd:ce:0e:ef:01:18:61:d0:ef:b0:14:29:b3:85:57:81:5f:
         6a:62:11:87:cc:12:00:dc:f2:be:4d:65:13:7a:4f:fa:a5:4a:
         9f:28:db:53:b8:0e:e9:7d:e6:65:94:d7:f2:36:57:7b:46:e9:
         23:46:9a:0d:7b:9c:ee:a1:12:23:72:b0:bd:d6:92:34:e3:1a:
         c7:37:0f:98:68:78:07:01:27:25:d3:cb:74:d9:6a:dc:ad:39:
         47:21:fa:f2:51:2c:1b:6d:bd:54:82:94:0a:1e:a8:70:ee:45:
         3b:68:ac:b0:e1:a5:25:0e:0b:59:3b:23:e8:ad:f2:72:9c:a4:
         4d:a7:c1:f3:24:ce:bf:02:b8:66:f9:75:04:c4:90:ad:58:48:
         39:10:fc:01:6c:34:2d:d1:46:55:14:9f:f5:3e:60:61:18:0f:
         95:7d:d4:6b:db:8d:f4:21:31:de:e5:58:18:3e:35:d7:6d:89:
         af:d9:b2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----